Page Comparison

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

Comment: Updating numbered headings

...

Author: Alex Torras (Unlicensed)

1.

...

Create SAML IdP

Go to Security → Identity providers
Select Add identity provider
Select SAML 2.0 IdP and then Next
In the Configure SAML 2.0 IdP section:
1. Enter a Name
2. In IdP username select idpuser.subjectNameId
3. In IdP Issuer URI enter https://{$ENV_FQDN}:443/api/saml/metadata
4. In IdP Single Sign-On URL enter https://{$ENV_FQDN}:443/api/saml/SSO
5. In Destination enter https://{$ENV_FQDN}):443/api/saml/SSO
Select Finish

...

...

2. Create SAML Application

Go to Applications → Applications
Select Create App Integration
Select SAML 2.0 and then Next
Enter an App name and select Next
In the Configure SAML section:
1. In Single sign-on URL, DO NOT uncheck the Use this for Recipient URL and Destination URL, and enter https://{$ENV_FQDN}:443/api/saml/SSO
2. In Audience URI (SP Entity ID) enter https://{$ENV_FQDN}:443/api/saml/metadata
3. In Attribute Statements enter one for each claim declared in abiquo.properties. Follow this table as an example:

...

Select Next and Finish.
Download the Metadata details from the Sign On tab: open the URL, right click, and save as idp_metadata.xml.

...

...

3. Configure User claims

Go to Directory → People.
Select the user you want to configure
Select Assign Applications
Select Assign on the SAML Application previously created
Select Save and Go Back and Done
Select Profile tab
Select Edit and in attributes enter the following
1. Username: the givenname
2. First Name: the name
3. Last Name: the surname
4. Primary email: the email
5. Title: the abq-role (the external role configured in your environment)
6. Department: the abq-enterprise (the enterprise you want the user to sign in in your environment)
Select Save

...

...

4. Configure Abiquo

Create the abq-enterprise that you want the user to sign in to.
Create the role and for the External roles, enter the abq-role that you want to assign to the user.
On the Abiquo Server, configure the abiquo.properties file :

...